x509证书 - 键集不存在 [英] X509Certificate - Keyset does not exist

问题描述

我有一个的WinForms 应用程序消耗WCF和作为参数传递给函数的证书：

I have a WinForms application that consumes a WCF, and pass as a parameter to a function a certificate:

mySvcClient.SendDocument(cert.Export(X509ContentType.SerializedCert, "password"));
...

在WCF服务后，我重新创建从字节数组证书：

In WCF service, I recreated the certificate from the array of bytes:

public void SendDocument (byte[] binaryCert)
{   
     X509Certificate2 cert = new X509Certificate2(binaryCert, "password");
...

但使用证书签署XML时，我得到了错误键集不存在：

But when using the certificate to sign a xml, I got the error "Keyset does not exist":

if (cert.HasPrivateKey) // WORKS!!!
{   
    signedXml.SigningKey = cert.PrivateKey; // THROW "keyset does not exist" EXCEPTION
...

在我的电脑，应用程序的工作100％！ ！但在Web服务器，我得到这个错误

In my computer, the application works 100%! But in the WebServer, I got this error!

现在的问题是：偶X509Certificate2从字节数组重建，我需要访问私钥一些特殊的权限

The question is: even X509Certificate2 recreated from an array of bytes, I need some special permission to access private key?

感谢您！

推荐答案

我也遇到这个问题，我的证书在哪里有私钥，但我得到这个错误（键集不存在）

I have faced this issue, my certificates where having private key but i was getting this error("Keyset does not exist")

原因：您的网站站点下运行网络服务帐户，或有较少的特权

Cause: Your web site is running under "Network services" account or having less privileges.

解决方法：更改应用程序池标识本地系统重置IIS 并再次检查。如果它开始的工作是许可/特权较低的问题，你也可以模拟然后使用其他帐户。

Solution: Change Application pool identity to "Local System", reset IIS and check again. If it starts working it is permission/Less privilege issue, you can impersonate then using other accounts too.

这篇关于x509证书 - 键集不存在的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！